HIGH7.3Go
GHSA-89qm-wcmw-3mgg· CVE-2022-23509, GO-2023-1388Gitops Run insecure communication
Modified: 8/20/2024
package
Go/github.com/weaveworks/weave-gitops
pkg:go/github.com/weaveworks/weave-gitops
HIGH8.8Go
GHSA-wr3c-g326-486c· CVE-2022-23508, GO-2023-1377GitOps Run allows for Kubernetes workload injection
Modified: 8/20/2024
CRITICAL9.0Go
GHSA-xggc-qprg-x6mw· CVE-2022-31098, GO-2022-0502Weave GitOps leaked cluster credentials into logs on connection errors
Modified: 8/21/2024
—Go
GO-2022-0502· CVE-2022-31098, GHSA-xggc-qprg-x6mwWeave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops
Modified: 3/3/2026
—Go
GO-2023-1377· CVE-2022-23508, GHSA-wr3c-g326-486cGitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops
Modified: 3/3/2026
—Go
GO-2023-1388· CVE-2022-23509, GHSA-89qm-wcmw-3mggGitops Run insecure communication in github.com/weaveworks/weave-gitops
Modified: 3/3/2026